[jazzyjackson]

Bribing hotel clerks to make a new account every time a guest checks in and hands their passport over might be easier since in this case you just need to scan once to register. Maybe that sounds impractical and low volume but imagine you own a chain of hotels across thailand or whatever, you could probably make thousands of accounts a day and just sell that as a service.

[lxgr]

Yes, that's just another problem with using ICAO biometric travel documents for something they have decidedly never been designed for: They don't have any PIN code protection, unlike some national digital ID schemes based on similar technology.